Title
A model for the analysis of security policies in service function chains
Abstract
Two emerging architectural paradigms, i.e., Software Defined Networking (SDN) and Network Function Virtualization (NFV), enable the deployment and management of Service Function Chains (SFCs). A SFC is an ordered sequence of abstract Service Functions (SFs), e.g., firewalls, VPN-gateways, traffic monitors, that packets have to traverse in the route from source to destination. While this appealing solution offers significant advantages in terms of flexibility, it also introduces new challenges such as the correct configuration and ordering of SFs in the chain to satisfy overall security requirements. This paper presents a formal model conceived to enable the verification of correct policy enforcements in SFCs. Software tools based on the model can then be designed to cope with unwanted network behaviors (e.g., security flaws) deriving from incorrect interactions of SFs in the same SFC.
Year
DOI
Venue
2017
10.1109/NETSOFT.2017.8004230
2017 IEEE Conference on Network Softwarization (NetSoft)
Keywords
DocType
Volume
security policies,service function chains,software defined networking,SDN,network function virtualization,NFV,SFC,formal model,software tools
Journal
abs/1710.03486
ISSN
ISBN
Citations 
Published in: Network Softwarization (NetSoft), 2017 IEEE Conference on
978-1-5090-6009-2
4
PageRank 
References 
Authors
0.50
9
4
Name
Order
Citations
PageRank
Luca Durante123120.12
Lucia Seno2879.69
Fulvio Valenza35411.17
Adriano Valenzano453558.77